Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Luxembourg

Internet Service Provider: BuyVM

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbots
Trying ports that it shouldn't be.
2019-09-16 03:18:01
attackbots
Sep 13 23:32:38 master sshd[24440]: Failed password for root from 104.244.74.11 port 40654 ssh2
Sep 13 23:32:40 master sshd[24442]: Failed password for root from 104.244.74.11 port 43056 ssh2
Sep 13 23:32:43 master sshd[24444]: Failed password for root from 104.244.74.11 port 44768 ssh2
Sep 13 23:32:46 master sshd[24446]: Failed password for root from 104.244.74.11 port 46854 ssh2
Sep 13 23:32:49 master sshd[24448]: Failed password for invalid user admin from 104.244.74.11 port 48958 ssh2
Sep 13 23:32:52 master sshd[24450]: Failed password for invalid user admin from 104.244.74.11 port 50988 ssh2
Sep 13 23:32:55 master sshd[24452]: Failed password for invalid user admin from 104.244.74.11 port 53590 ssh2
Sep 13 23:32:57 master sshd[24454]: Failed password for invalid user test from 104.244.74.11 port 55668 ssh2
Sep 13 23:33:00 master sshd[24456]: Failed password for invalid user pi from 104.244.74.11 port 57072 ssh2
Sep 13 23:33:03 master sshd[24458]: Failed password for invalid user support from 104.244.74.1
2019-09-14 07:53:43
attack
Trying ports that it shouldn't be.
2019-08-29 16:27:35
attackbotsspam
Automatic report - Port Scan Attack
2019-08-28 07:02:28
attack
2019-08-26T02:14:59.755591enmeeting.mahidol.ac.th sshd\[20021\]: User root from 104.244.74.11 not allowed because not listed in AllowUsers
2019-08-26T02:14:59.878460enmeeting.mahidol.ac.th sshd\[20021\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.74.11  user=root
2019-08-26T02:15:01.974838enmeeting.mahidol.ac.th sshd\[20021\]: Failed password for invalid user root from 104.244.74.11 port 40484 ssh2
...
2019-08-26 09:07:30
Comments on same subnet:
IP Type Details Datetime
104.244.74.223 attackspam
Sep 26 22:41:53 OPSO sshd\[7410\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.74.223  user=root
Sep 26 22:41:55 OPSO sshd\[7410\]: Failed password for root from 104.244.74.223 port 39220 ssh2
Sep 26 22:41:55 OPSO sshd\[7412\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.74.223  user=admin
Sep 26 22:41:57 OPSO sshd\[7412\]: Failed password for admin from 104.244.74.223 port 41022 ssh2
Sep 26 22:41:58 OPSO sshd\[7416\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.74.223  user=root
2020-09-27 04:58:33
104.244.74.223 attackbots
 TCP (SYN) 104.244.74.223:36692 -> port 22, len 48
2020-09-26 12:52:54
104.244.74.28 attackbotsspam
Sep 20 03:44:25 propaganda sshd[23022]: Connection from 104.244.74.28 port 55042 on 10.0.0.161 port 22 rdomain ""
Sep 20 03:44:26 propaganda sshd[23022]: Invalid user admin from 104.244.74.28 port 55042
2020-09-21 02:06:38
104.244.74.28 attack
2020-09-20T07:27:05+0200 Failed SSH Authentication/Brute Force Attack. (Server 5)
2020-09-20 18:07:24
104.244.74.223 attackspambots
Invalid user admin from 104.244.74.223 port 46624
2020-09-20 00:56:56
104.244.74.223 attackspam
2020-09-19T08:12:51.934191dmca.cloudsearch.cf sshd[7343]: Invalid user admin from 104.244.74.223 port 47402
2020-09-19T08:12:51.939421dmca.cloudsearch.cf sshd[7343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.74.223
2020-09-19T08:12:51.934191dmca.cloudsearch.cf sshd[7343]: Invalid user admin from 104.244.74.223 port 47402
2020-09-19T08:12:54.215542dmca.cloudsearch.cf sshd[7343]: Failed password for invalid user admin from 104.244.74.223 port 47402 ssh2
2020-09-19T08:12:54.447796dmca.cloudsearch.cf sshd[7345]: Invalid user admin from 104.244.74.223 port 48650
2020-09-19T08:12:54.452658dmca.cloudsearch.cf sshd[7345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.74.223
2020-09-19T08:12:54.447796dmca.cloudsearch.cf sshd[7345]: Invalid user admin from 104.244.74.223 port 48650
2020-09-19T08:12:56.472965dmca.cloudsearch.cf sshd[7345]: Failed password for invalid user admin from 104.244.74.
...
2020-09-19 16:44:45
104.244.74.169 attack
Connection to SSH Honeypot - Detected by HoneypotDB
2020-09-16 23:56:12
104.244.74.169 attack
Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-16T07:33:31Z and 2020-09-16T07:33:34Z
2020-09-16 16:13:07
104.244.74.169 attackbotsspam
Sep 16 01:50:12 mail sshd[32693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.74.169
Sep 16 01:50:14 mail sshd[32693]: Failed password for invalid user admin from 104.244.74.169 port 58212 ssh2
...
2020-09-16 08:13:26
104.244.74.169 attackspambots
Sep 13 19:00:51 serwer sshd\[26735\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.74.169  user=root
Sep 13 19:00:53 serwer sshd\[26735\]: Failed password for root from 104.244.74.169 port 48976 ssh2
Sep 13 19:00:56 serwer sshd\[26735\]: Failed password for root from 104.244.74.169 port 48976 ssh2
...
2020-09-14 02:13:32
104.244.74.169 attackbotsspam
(sshd) Failed SSH login from 104.244.74.169 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 13 08:14:27 amsweb01 sshd[11989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.74.169  user=root
Sep 13 08:14:28 amsweb01 sshd[11989]: Failed password for root from 104.244.74.169 port 38474 ssh2
Sep 13 08:14:31 amsweb01 sshd[11989]: Failed password for root from 104.244.74.169 port 38474 ssh2
Sep 13 08:14:33 amsweb01 sshd[11989]: Failed password for root from 104.244.74.169 port 38474 ssh2
Sep 13 08:14:35 amsweb01 sshd[11989]: Failed password for root from 104.244.74.169 port 38474 ssh2
2020-09-13 18:10:39
104.244.74.169 attackbotsspam
SSH Brute Force
2020-09-11 21:46:38
104.244.74.169 attack
2020-09-11T05:52:23.133475server.espacesoutien.com sshd[3375]: Failed password for root from 104.244.74.169 port 55944 ssh2
2020-09-11T05:52:25.662921server.espacesoutien.com sshd[3375]: Failed password for root from 104.244.74.169 port 55944 ssh2
2020-09-11T05:52:27.816712server.espacesoutien.com sshd[3375]: Failed password for root from 104.244.74.169 port 55944 ssh2
2020-09-11T05:52:30.466976server.espacesoutien.com sshd[3375]: Failed password for root from 104.244.74.169 port 55944 ssh2
...
2020-09-11 13:54:31
104.244.74.169 attackbotsspam
Dear user,
 
The IP address [104.244.74.169] experienced 2 failed attempts when attempting to log into SSH running on AstroParrotsNAS within 5 minutes, and was blocked at Wed Sep  9 15:40:51 2020.
 
From AstroParrotsNAS
2020-09-11 06:06:26
104.244.74.57 attack
(sshd) Failed SSH login from 104.244.74.57 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep  9 00:10:33 server4 sshd[17193]: Failed password for root from 104.244.74.57 port 59308 ssh2
Sep  9 00:10:36 server4 sshd[17193]: Failed password for root from 104.244.74.57 port 59308 ssh2
Sep  9 00:10:38 server4 sshd[17193]: Failed password for root from 104.244.74.57 port 59308 ssh2
Sep  9 00:10:41 server4 sshd[17193]: Failed password for root from 104.244.74.57 port 59308 ssh2
Sep  9 00:10:44 server4 sshd[17193]: Failed password for root from 104.244.74.57 port 59308 ssh2
2020-09-09 19:43:54
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.244.74.11
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27420
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.244.74.11.			IN	A

;; AUTHORITY SECTION:
.			3239	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019082501 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Aug 26 09:07:20 CST 2019
;; MSG SIZE  rcvd: 117
Host info
11.74.244.104.in-addr.arpa domain name pointer lx.ctlc.cc.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
11.74.244.104.in-addr.arpa	name = lx.ctlc.cc.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
122.140.213.19 attackspambots
8080/tcp
[2019-09-04]1pkt
2019-09-05 08:36:39
176.159.245.147 attack
Sep  4 14:26:42 eddieflores sshd\[12123\]: Invalid user demo from 176.159.245.147
Sep  4 14:26:42 eddieflores sshd\[12123\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static-176-159-245-147.ftth.abo.bbox.fr
Sep  4 14:26:44 eddieflores sshd\[12123\]: Failed password for invalid user demo from 176.159.245.147 port 36996 ssh2
Sep  4 14:31:07 eddieflores sshd\[12476\]: Invalid user user from 176.159.245.147
Sep  4 14:31:07 eddieflores sshd\[12476\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static-176-159-245-147.ftth.abo.bbox.fr
2019-09-05 08:47:02
222.186.42.163 attackspam
Sep  5 06:07:42 areeb-Workstation sshd[25295]: Failed password for root from 222.186.42.163 port 12956 ssh2
...
2019-09-05 08:52:44
118.173.109.150 attackbots
445/tcp 445/tcp
[2019-09-04]2pkt
2019-09-05 09:17:58
183.17.231.183 attackbots
Unauthorized connection attempt from IP address 183.17.231.183 on Port 445(SMB)
2019-09-05 08:57:15
171.88.166.33 attackspambots
Unauthorized connection attempt from IP address 171.88.166.33 on Port 445(SMB)
2019-09-05 09:17:19
41.200.247.67 attackbots
Sep  4 16:30:14 home sshd[10673]: Invalid user server from 41.200.247.67 port 58914
Sep  4 16:30:14 home sshd[10673]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.200.247.67
Sep  4 16:30:14 home sshd[10673]: Invalid user server from 41.200.247.67 port 58914
Sep  4 16:30:16 home sshd[10673]: Failed password for invalid user server from 41.200.247.67 port 58914 ssh2
Sep  4 16:43:00 home sshd[10712]: Invalid user postgres from 41.200.247.67 port 60672
Sep  4 16:43:00 home sshd[10712]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.200.247.67
Sep  4 16:43:00 home sshd[10712]: Invalid user postgres from 41.200.247.67 port 60672
Sep  4 16:43:01 home sshd[10712]: Failed password for invalid user postgres from 41.200.247.67 port 60672 ssh2
Sep  4 16:48:33 home sshd[10721]: Invalid user ftpuser from 41.200.247.67 port 48594
Sep  4 16:48:33 home sshd[10721]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ss
2019-09-05 09:16:54
159.203.56.162 attackbots
WP_xmlrpc_attack
2019-09-05 08:54:18
197.51.3.207 attack
Unauthorized connection attempt from IP address 197.51.3.207 on Port 445(SMB)
2019-09-05 08:55:01
103.105.216.39 attackspambots
Sep  4 19:02:51 em3 sshd[2048]: Invalid user test1 from 103.105.216.39
Sep  4 19:02:51 em3 sshd[2048]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.105.216.39 
Sep  4 19:02:53 em3 sshd[2048]: Failed password for invalid user test1 from 103.105.216.39 port 40932 ssh2
Sep  4 19:17:21 em3 sshd[2255]: Invalid user admin from 103.105.216.39
Sep  4 19:17:21 em3 sshd[2255]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.105.216.39 

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=103.105.216.39
2019-09-05 09:18:29
109.87.40.4 attackspam
445/tcp
[2019-09-04]1pkt
2019-09-05 09:06:01
79.190.48.166 attack
Sep  5 01:02:15 icinga sshd[10559]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.190.48.166
Sep  5 01:02:18 icinga sshd[10559]: Failed password for invalid user ink from 79.190.48.166 port 56222 ssh2
...
2019-09-05 08:41:40
45.71.208.253 attackspam
Sep  5 03:38:50 www sshd\[38302\]: Invalid user sammy from 45.71.208.253
Sep  5 03:38:50 www sshd\[38302\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.71.208.253
Sep  5 03:38:52 www sshd\[38302\]: Failed password for invalid user sammy from 45.71.208.253 port 38812 ssh2
...
2019-09-05 08:43:54
218.98.26.172 attackbotsspam
SSH-BruteForce
2019-09-05 08:50:56
59.41.165.186 attack
Unauthorized connection attempt from IP address 59.41.165.186 on Port 445(SMB)
2019-09-05 08:37:50

Recently Reported IPs

139.78.229.227 24.12.76.113 126.249.10.61 75.89.55.122
89.86.251.235 14.237.81.183 209.85.222.194 198.87.6.120
222.211.181.223 122.48.44.38 51.208.71.109 43.117.27.63
10.145.210.175 47.215.68.201 249.149.73.84 71.234.94.249
128.148.4.216 5.207.208.88 62.242.151.181 183.72.152.105